
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/BA55D63C415311F1A8AAFB3BCA833773.roa
File: BA55D63C415311F1A8AAFB3BCA833773.roa (raw, json)
Hash identifier: 5c6lk8zZg9JDdCtbr0MwnxF7u7fQcm0RumOai6GNeD4=
Subject key identifier: C8:7C:69:B1:0D:56:9B:2E:CF:1A:D6:B1:8A:33:E0:39:1F:1B:DD:2D
Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Certificate serial: 0EB1
Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/BA55D63C415311F1A8AAFB3BCA833773.roa
Signing time: Sun 26 Apr 2026 09:38:49 +0000
ROA not before: Sun 26 Apr 2026 09:38:49 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 149765
IP address blocks: 103.106.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl
rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 17:38:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3761 (0xeb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Validity
Not Before: Apr 26 09:38:49 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69eddd29-cbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:dc:28:c5:5d:f4:3a:50:07:e1:87:b9:80:
0f:8e:a7:05:c7:4f:aa:8c:db:5f:f8:19:a4:84:09:
1a:d1:bd:1d:a7:81:0e:ba:03:54:c2:1a:95:1b:31:
e0:aa:f3:7f:73:bd:f9:ac:1e:08:73:33:0a:bc:bf:
7a:5b:29:31:e8:32:5e:00:47:19:0a:19:78:36:48:
df:86:55:fa:76:25:d9:36:fb:93:db:0b:54:01:88:
05:52:36:f0:31:9f:89:66:92:84:e6:8d:1b:1a:21:
3d:d7:2e:4c:d1:63:03:08:25:dd:9d:67:ba:a0:4c:
94:98:14:00:42:c7:59:ed:91:ed:37:12:fb:f0:8e:
be:90:83:ae:3b:52:a3:46:96:03:e0:66:ef:9f:fd:
f4:e4:ab:84:b2:50:90:e4:b6:f1:09:69:1a:d1:a3:
28:63:7f:52:0f:a8:7f:fa:47:b8:d2:ac:ce:ec:c7:
f4:71:4f:ff:f0:5d:8c:1d:40:8b:3e:31:0c:10:e3:
0b:1d:13:42:f5:ec:bf:d1:ba:d1:6a:ed:86:5b:37:
97:ba:9a:0f:ed:b6:34:71:54:5c:fd:9a:95:c0:f7:
00:f6:a9:11:8c:37:1c:c8:06:9e:e1:c5:84:7b:d3:
6f:a1:19:a6:81:27:17:c9:1c:9a:2e:6c:a9:f4:f3:
42:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7C:69:B1:0D:56:9B:2E:CF:1A:D6:B1:8A:33:E0:39:1F:1B:DD:2D
X509v3 Authority Key Identifier:
keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/BA55D63C415311F1A8AAFB3BCA833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.106.239.0/24
Signature Algorithm: sha256WithRSAEncryption
13:0e:92:c2:b0:ad:d9:c5:b2:9a:6a:c1:8a:e3:07:2d:1a:24:
62:d0:be:d3:6d:ae:42:c9:76:b3:c3:7b:35:9b:9d:37:74:d4:
6a:c2:73:22:72:90:5c:47:8d:a6:28:5e:38:30:c6:0b:35:23:
da:af:d1:bf:b4:25:3c:a6:86:26:0d:75:c0:02:4e:99:e0:cd:
a4:63:2c:5c:c2:f9:f9:03:55:97:d3:71:19:d3:3c:88:c6:9a:
dd:76:b8:75:93:96:c7:b1:d0:d8:8b:07:ec:9e:d3:93:d9:2a:
0f:4d:c2:ec:95:ec:5a:e6:14:dc:f4:ee:50:41:b9:d0:63:df:
24:1f:f7:8d:8b:cf:c4:a8:31:82:66:62:90:f6:1b:ce:60:d0:
87:f9:06:b4:24:04:f5:45:05:8b:fe:1b:19:6a:e0:a4:d8:cf:
97:ea:6a:0a:0d:69:09:82:4a:b8:2a:71:af:5d:b1:28:e0:4f:
ac:85:63:ae:48:1d:e3:88:30:40:68:08:c4:70:20:db:c9:57:
d9:d0:65:b0:11:ae:f6:98:66:ce:f4:7c:bc:78:d9:5b:90:8b:
e5:2a:9d:81:1c:f6:5e:10:de:69:c4:60:40:c3:eb:b1:a1:63:
90:98:17:de:5e:af:53:3c:a4:e4:0a:60:6d:eb:bb:d3:5b:5c:
38:f7:50:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 11:33:43 2026 by rpki-client